OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
0answers
10 views

How to ensure encrypted OpenLDAP sessions using SASL/GSSAPI

I am running OpenLDAP 2.4 on a Debian jessie system. Clients typically connect to this LDAP server over port 389 using SASL/GSSAPI with our Kerberos infrastructure. When a client connects using SASL/...
1
vote
0answers
23 views

Cannot sync OpenLDAP directory with Azure AD

I am trying to connect and sync OpenLDAP with Microsoft Azure AD using Generic LDAP connector as described in the URL below: https://azure.microsoft.com/en-in/documentation/articles/active-directory-...
0
votes
1answer
9 views

nslcd and kerberos without Reverse DNS

I am trying to get nslcd to connect with an ldap instance using GSSAPI and kerberos authentication. Problem i'm having is that nslcd keeps using the wrong principal to try and connected with the ...
0
votes
0answers
3 views

OpenLdap with ppolicy plugin: is it possible to auto-remove pwdFailureTime attributes?

OpenLdap 2.4.* is in use, with ppolicy plugin I noticed that pwdFailureTime multivalue attribute is being added to LDAP database, but looks like it is never deleted. Is there simple way to make ...
0
votes
1answer
11 views

testsaslauthd on openLDAP centos worked for first time but failed after that

testsaslauthd only works for first time after i edited the file /etc/saslauthd.conf and restarted openLDAP when i run it the second time, it is showing authentication failed. When i reedited the file ...
0
votes
0answers
9 views

creating a consumer by cloning the provider in openldap, anything wrong with that?

I have setup an ldap server on centos 7 as a provider and created a consumer by simply cloning the provider and adding syncrepl.ldif to it and seems to work just fine. In all the documentations and ...
-2
votes
0answers
12 views

Microsoft identity Manager ldap [on hold]

I'm in trouble because I don't know what I have to do. I have a client with OpenLDAP and they want to upload their users to Azure Active Directory. I thought on using MIM or FIM but all what I see in ...
0
votes
0answers
6 views

Can not select multiple LDAP servers with authconfig bug report

There is this bug report "Can not select multiple LDAP servers with authconfig" Red Hat Bugzilla – Bug 1142830; https://bugzilla.redhat.com/show_bug.cgi?id=1142830 which is suppose to be solved on ...
3
votes
0answers
28 views

Authentication vsftpd account using remote LDAP user

I'm trying to authenticate vsftpd from LDAP logins which hosted remotely another server . vsftpd hosted on Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-48-generic x86_64) amazon aws . from the LDAP server ...
1
vote
1answer
33 views

OpenLDAP client inside a docker container

I have a docker container running CentOS 6 with a non-root user and OpenLDAP. When I use getent passwd it just returns the data from /etc/passwd. The config file /etc/nsswitch.conf is customized ...
-1
votes
0answers
15 views

openldap as filtering proxy for AD

I have successfully set up an OpenLDAP as proxy; this is so that public-facing servers not in our corp network can run LDAP-authenticating web apps without having to expose the Windows AD Server to ...
2
votes
0answers
57 views

LDAP changing password for wrong user?

I have an OpenLDAP server setup. I currently have two users added to my server. As far as my testing goes, a single user instance work just perfectly. My first issue arise when i have two users on the ...
0
votes
1answer
19 views

LDAP SSH + PubKey auth Fallback

I have followed this guide here : https://github.com/jirutka/ssh-ldap-pubkey In order to setup a LDAP server that allows authentication requesting both Password and Public Key in order to login. Now ...
0
votes
1answer
9 views

how a client switches from provider to consmure openldap centos 7

I have setup a basic provider/consumer and client openldap on centos 7. Data does get replicated to the consumer when I add something to the provider and it is all synced up. The client can read info ...
0
votes
1answer
24 views

openldap replication on centos 7 not replicated

I have setup a simple openldap server on centos 7 minimum. Added a couple of users and setup a client that can retrieve the users using getentpasswd and ldapsearch works fine between the two. Then I ...
0
votes
0answers
13 views

Can't pass authentication when use openldap users

18) suffix: No '@' in User-Name = "t1", looking up realm NULL (18) mschap: ERROR: FAILED: No NT/LM-Password. Cannot perform authentication (18) mschap: ERROR: MS-CHAP2-Response is incorrect (18) MS-...
0
votes
1answer
6 views

Kerberos Bootstrap error with ldap

Up until recently I have had no issues deploying Kerberos with an LDAP backend for the database. Recently however I have started to get this error when trying to generate the password stash file ...
1
vote
1answer
41 views

OpenLDAP debugging logs

I have OpenLDAP version 2.4.40 which is being cross compiled for a different (proprietary) target. This has been in place and working fine for many years but now I find myself needing to get some ...
0
votes
1answer
14 views

openldap best practice: changing server admin/bind password

I have an OpenLDAP server and many clients which bind to the server with username/password in order to authenticate against user's passwords. I'd like to change the server's password on a fairly ...
0
votes
1answer
115 views

ldapsearch works for ldaps but getent passwd 'user' returns nothing on Centos 7 minimum openldap server

I have installed openldap on centos 7 minimum and added a user newuser01 to the database successfuly. ldapsearch works fine with both the master and the client using this format: ldapsearch -H ldaps:/...
0
votes
2answers
40 views

For centos 7 minimal ldap works but ldaps does not

I have an OpenLDAP server version openldap-2.4.40 that works fine on CentOS 7 minimal. I tested by issuing: ldapwhoami -H ldap://provider.med.cornell.edu -x \ -D "cn=Manager,dc=provider,dc=med,dc=...
1
vote
0answers
35 views

Openldap configuration on RHEL 6.6 client

We have a shell script which runs perl program to connect to LDAP server and make entries. This is the only script which uses ldap. This server is hosting all batch related files and run batch jobs ...
0
votes
1answer
65 views

Running (brew) openldap on osx El Capitan?

As Apple keeps making "improvements" to the LDAP that comes with OSX (i.e. keeps breaking it on each update), I had to do my own installation of openldap, which worked fine on Maverick and Yosemite (...
1
vote
0answers
116 views

How to allow users on an openLDAP server to create, update, and modify users under a certain organizationalUnit?

I have been stuck on trying to allow openLDAP users that are in a certain group (EX: cn=Admins,dc=mydomain,dc=com) to create, modify, update, and delete users that are in another organizationalUnit (...
0
votes
0answers
19 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
0answers
8 views

How to set an ACL in OpenLDAP to allow a user to fully manage an OrganizationalUnit? [duplicate]

I just installed OpenLDAP on my Ubuntu Server 16.04 LTS. I have my OpenLDAP server setup as depicted in the image below: Just like the image depicts I would like the blue color coded cn=admin to be ...
1
vote
0answers
14 views

Unable to configure TLS options for OpenLDAP

I am struggling with setting up TLS for a new OpenLDAP server. The system is Debian Jessie (updated to the latest 8.5 stable), and I have set up the server by installing the slapd package, with almost ...
0
votes
0answers
23 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
0
votes
0answers
12 views

ldapadduser command throws “Could not guess current user”

I have ubuntu-12.04 server. I have setup OpenLdap server at 10.4.15.217. Its working fine. I have another Ubuntu-12.04 server where I installed ldapscripts using command "apt-get install ldapscripts"....
1
vote
1answer
57 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
1
vote
2answers
50 views

id command is not showing secondary groups

During some days I've been working on a LDAP integration. Now, after configure almost everything that I needed, I came up with this last wall: The need of use secondary groups which are taken from the ...
0
votes
0answers
18 views

Install OPENLDAP as service from compiled source

I am using Centos 7 and compiled openldap from source and installed it in a custom location, however I found that it doesn't come with the option of installing as service as it would if I yum install ...
0
votes
0answers
89 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
0
votes
1answer
60 views

Forcing OpenLDAP connections to use STARTTLS not allowing user to login

I have a basic OpenLDAP server running on Ubuntu 16.04LTS which authenticates users perfectly fine but I really wanted to make it more secure so I decided to use STARTTLS and How To Encrypt OpenLDAP ...
0
votes
2answers
238 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
16 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
0
votes
1answer
62 views

Error while compiling apr-util for apache with LDAP support

I am currently trying to create a custom 64bit LAMPP stack on CentOS 7, in which each component should reside in its own folder, with every dependency included and in its own folder. Currently, I ...
1
vote
0answers
14 views

rfc2307bis LDAP schema: ipNetmaskNumber lookup for an ipHost object

I'm using Openldap for IAM, and consider using it also as a configuration management backend. The rfc2307bis schema has an ipHost class, which allows for ipHostNumber attribute, but not for the ...
0
votes
0answers
16 views

error: found a non-fatal phpLDAPAdmin Bug

i just install openldap with phpldapadmin. but when i go to monitor menu i found: is this actually something can be solved? anyone ever solve this issue before? Thanks, AnD
1
vote
1answer
36 views

OpenLDAP TLS CA configuration

I'm currently in the process of setting up two sychronized OpenLDAP servers, access through starttls/ldaps. On the client/slave, I had problems with the TLS connection. I'm using the directory-based ...
1
vote
0answers
36 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
0
votes
1answer
41 views

error: Automatically removed objectClass from template as it is not defined in the schema

I'm installing openldap with phpldapadmin in 2 diffrent CENTOS 7 servers with configuration as follows: openldap server: firewall-cmd --permanent --add-service=ldap firewall-cmd --permanent --add-...
0
votes
1answer
38 views

Open Directory won't authenticate

I have 2 servers running Open Directory (Mac OS X). One is running the master Open Directory(OD) server, the other is running a replica. For a little while, the master has been down to Apple ...
1
vote
0answers
85 views

`ldap_bind: Invalid credentials` during setup of LDAP server on Centos 7 VM

I am setting up an LDAP server on a centos 7 VM, by following the guide here. Everything is fine until the last part of step 4, after I create the base domain. I have not changed ldap.conf or similar ...
-1
votes
1answer
41 views

How to switch user in Linux with password

I have client with LDAP authenticatation, when user1 login to client, and switch to user2 (sudo su - user2), he just login without password. I want to make switching user in client with authentication ...
0
votes
1answer
49 views

Open LDAP Server migration

Im trying to migrate an Open LDAP Server from Ubuntu LTS to Arch Linux. So I followed the Guid by Alex Pánek. So first I backuped the Databases from the Ubuntu Maschine: ubuntu$ sudo slapcat -b cn=...
2
votes
1answer
50 views

LDAP Remote Login Logs

How would I log who authenticated against my ldap system on Linux in my lab? I have a lab with several workstations, and one server running openldap. I would like to have similar functionality as with ...
1
vote
1answer
96 views

openSSL/openLDAP tls error

I have two openLDAP servers, each was setup side by side using a script that did all the heavy lifting, the two servers replicate their configs/users to each other, and for a long time I thought ...
0
votes
0answers
39 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
2
votes
1answer
86 views

LDAP: error code 50 - no write access to parent while adding user in OpenLDAP

I am trying to create a user in OpenLDAP through my Java code(which works in all of LDAP environments I have tried so far). When I tried it with OpenLDAP, I got the following error: LDAP: error code ...